• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 236
  • Last Modified:

Is this file safe to uninstall?

Hi,

I have a client with an infected file. The file is eied_s7_c_29.exe, and it is infected with download.trojan.

Does anyone know if it's safe to delete this file? I did a Google search on it, but I had a hard time finding an answer.


Thanks.

Kara
0
kara334
Asked:
kara334
  • 3
1 Solution
 
war1Commented:
Greetings, kara334 !

Yes, you can delete the file. It is not a Windows system file.  If you have difficulty deleting the file, Use Killbox or Unlocker in Safe Mode to remove the file.

Killbox to remove stuborn files
http://www.scancomplete.com/download/killbox/
OR
Unlocker
http://www.majorgeeks.com/download4660.html

If you cannot delete the file, disable it.  Right click on the file and select Properties > Security > Advanced. Uncheck "Inherent from parent" and remove other permissions.  If you are using Windows XP Home, you need to access the Security tab from Safe Mode. If using Windows XP Pro and security tab is not available, go to any folder and select Tools > Folder Options > View. Uncheck "Use simple file sharing".


Best wishes!
0
 
war1Commented:
kara334,

You can also try to delete the file in DOS.  If the file is in System Restore folder, then disable and re-enable system restore
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam
0
 
rpggamergirlCommented:
Yes, you should remove it, that file is part of Trojan.banker
You also can download removal also:
http://info.prevx.com/downloadremove.asp

CCleaner or Ewido should also remove it.
Using Killbox "Delete On Reboot" Option should do it too.
0
 
kara334Author Commented:
Hi,

The file was easy to delete once I located it. Funny, though, the name of the file was just slightly different from the one listed in the Norton scan. But it was the only file with a name of that type, and it was an executable. It was just sitting in a Temp. Int. Files folder.

I told my client to run another Norton scan to make sure this was indeed the infected file. If she contacts me saying the file Norton found was still in there, I may have more questions. But for now hopefully everything is OK. Thank you for your help.

Kara
0
 
war1Commented:
You are welcome, Kara!
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now